Return-Path: Delivered-To: apmail-tomcat-users-archive@www.apache.org Received: (qmail 37167 invoked from network); 12 Aug 2009 15:23:00 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 12 Aug 2009 15:23:00 -0000 Received: (qmail 11840 invoked by uid 500); 12 Aug 2009 15:23:03 -0000 Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org Received: (qmail 11786 invoked by uid 500); 12 Aug 2009 15:23:02 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 11775 invoked by uid 99); 12 Aug 2009 15:23:02 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Aug 2009 15:23:02 +0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=MIME_BASE64_BLANKS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: local policy) Received: from [66.219.55.137] (HELO mail.polydyne.com) (66.219.55.137) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Aug 2009 15:22:54 +0000 Received: from postoffice.polydyne.com [10.1.1.8] by mail.polydyne.com - Websense Email Security (7.0.0); Wed, 12 Aug 2009 10:22:33 -0500 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: base64 Subject: RE: avoiding ssl vulnerabilities in tomcat Date: Wed, 12 Aug 2009 10:22:33 -0500 Message-ID: In-Reply-To: <4A82DC12.90403@christopherschultz.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: avoiding ssl vulnerabilities in tomcat Thread-Index: AcobX4Qq1+EwyyXbSl6C65bHKTP3/wAAHIPQ References: <641541.15046.qm@web94911.mail.in2.yahoo.com> <4A82D595.9020101@christopherschultz.net> <4A82DC12.90403@christopherschultz.net> From: "Jeffrey Janner" To: "Tomcat Users List" X-SEF-7853D99-ADF1-478E-8894-213D316B8FFA: 1 X-SEF-Processed: 7_0_0_00242__2009_08_12_10_22_33 X-Virus-Checked: Checked by ClamAV on apache.org Q2hyaXMgLQ0KKEkganVzdCBkaWQgYSByZXBseSBpbiBPdXRsb29rIGFuZCB0aGlzIGlzIGhvdyBp dCBnb3QgcGFja2FnZWQuIERpZG4ndCBsb29rIHRoYXQgd2F5IHRvIG1lLCBidXQgZ290IGl0IHRo YXQgd2F5IG9uIHRoZSBzZW5kLWJhY2suICBFaXRoZXIgRXhjaGFuZ2Ugb3IgbXkgZW1haWwgZmls dGVyIC0gd2hpY2ggYWRkcyB0aGUgY29uZmlkZW50aWFsaXkgZm9vdGVyIC0gZGlkIHRoaXMuKQ0K DQpJIGZpZ3VyZWQgaXQgd2FzIG9ubHkgd2l0aCB0aGUgcmVndWxhci4gIEp1c3Qgd2FudGVkIGEg Y2xhcmlmaWNhdGlvbiBpbiBjYXNlIHNvbWUgZm9sa3Mgd2VyZSB0aGlua2luZyBpdCBhcHBsaWVk IHRvIHRoZSBuYXRpdmUgbGlicmFyaWVzIChBUFIpLiBJJ3ZlIG5vdGljZWQgYSBsb3Qgb2YgZm9s a3MgY29uZnVzZSB0aGUgdHdvIG9uIHRoaXMgbGlzdC4NCg0KQWxzbyBpdCB3YXMgYSBzbGlnaHQg cHJvbXB0IHRvIHRoZSBvcmlnaW5hbCBwb3N0ZXIgdGhhdCBwZXJoYXBzIGhlIHNob3VsZCBpbnN0 YWxsIHRoZSBuYXRpdmUgbGlicmFyaWVzIHdoZW4gaGUgZG9lcyBmaW5hbGx5IGdvIHRvIDYueC4g IElJUkMsIHRoZXkgYXJlIG5vdCBhdmFpbGFibGUgdG8gNC54Lg0KSmVmZg0KDQotLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogQ2hyaXN0b3BoZXIgU2NodWx0eiBbbWFpbHRvOmNocmlz QGNocmlzdG9waGVyc2NodWx0ei5uZXRdIA0KDQpKZWZmLA0KDQooU3RyYW5nZS4uLiB0byBtZSwg eW91ciBtZXNzYWdlIGxvb2tlZCBsaWtlIGFuIGF0dGFjaG1lbnQgdG8gdGhlDQpzZWN1cml0eSBu b3RpY2UgdGhhdCB3b3VsZCB0eXBpY2FsbHkgYmUgcHV0IGF0IHRoZSBlbmQgb2YgYSBtZXNzYWdl Lg0KV2hlbiBJIHRyaWVkIHRvIHJlcGx5IHRvIHRoYXQsIGFsbCB0aGUgY2hhcmFjdGVycyBnb3Qg YWxsIHdvbmt5LiBBdA0KbGVhc3QgY295LXBhc3RlIHN0aWxsIHdvcmtzIDopDQoNCk9uIDgvMTIv MjAwOSAxMDo1MSBBTSwgSmVmZnJleSBKYW5uZXIgd3JvdGU6DQo+IEp1c3QgdG8gY2xhcmlmeSBz b21lIHRoaW5nczogIFRoaXMgQ1ZFIG9ubHkgYXBwbGllcyB0byB0aGUgZGVmYXVsdA0KPiBTU0wg Y29ubmVjdG9yIGZ1bmN0aW9uYWxpdHkuICBJdCBkb2Vzbid0IGFwcGx5IHRvIHRoZSBBUFIvT3Bl blNTTA0KPiBjb25uZWN0b3IuIENvcnJlY3Q/DQoNCkkgd291bGQgZ3Vlc3Mgbm90LCBzaW5jZSBB UFIgdXNlcyBvcGVuc3NsIHdoaWNoIGhhcyBpdHMgb3duIGRlZmF1bHQgc2V0DQpvZiBjaXBoZXJz LiBPbiB0aGUgb3RoZXIgaGFuZCwgVG9tY2F0IGNvdWxkIG92ZXJyaWRlIHRoZSBkZWZhdWx0IHNl dCBvZg0KY2lwaGVycyB3aGVuIGNvbmZpZ3VyaW5nIEFQUiBhdCBydW50aW1lLg0KDQoNCioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKiogIE5PVElDRSAgKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqDQpUaGlzIG1lc3NhZ2UgaXMgaW50ZW5kZWQgZm9yIHRoZSB1c2Ugb2YgdGhl IGluZGl2aWR1YWwgb3IgZW50aXR5IHRvIHdoaWNoIA0KaXQgaXMgYWRkcmVzc2VkIGFuZCBtYXkg Y29udGFpbiBpbmZvcm1hdGlvbiB0aGF0IGlzIHByaXZpbGVnZWQsIA0KY29uZmlkZW50aWFsLCBh bmQgZXhlbXB0IGZyb20gZGlzY2xvc3VyZSB1bmRlciBhcHBsaWNhYmxlIGxhdy4gIElmIHRoZSAN CnJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQgb3Ig dGhlIGVtcGxveWVlIG9yIA0KYWdlbnQgcmVzcG9uc2libGUgZm9yIGRlbGl2ZXJpbmcgdGhpcyBt ZXNzYWdlIHRvIHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIA0KeW91IGFyZSBoZXJlYnkgbm90aWZp ZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uLCBvciBjb3B5aW5nIA0Kb2Yg dGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuICBJZiB5b3UgaGF2ZSBy ZWNlaXZlZCB0aGlzIA0KY29tbXVuaWNhdGlvbiBpbiBlcnJvciwgcGxlYXNlIG5vdGlmeSB1cyBp bW1lZGlhdGVseSBieSByZXBseSBvciBieSANCnRlbGVwaG9uZSAoY2FsbCB1cyBjb2xsZWN0IGF0 IDUxMi0zNDMtOTEwMCkgYW5kIGltbWVkaWF0ZWx5IGRlbGV0ZSB0aGlzIA0KbWVzc2FnZSBhbmQg YWxsIGl0cyBhdHRhY2htZW50cy4NCg==